F5 Networks BIG-IP : Apache vulnerability (K65355492)

Apache modules apacheauthtokenmod and modauthf5authtoken.cpp allow possible unauthenticated bruteforce on the emserverip authorization parameter to obtain which SSL client certificates used for mutual authentication between BIG-IQ or Enterprise Manager EM and managed BIG-IP devices. CVE-2018-5506...

CVE-2018-5506

In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apacheauthtokenmod and modauthf5authtoken.cpp allow possible unauthenticated bruteforce on the emserverip authorization parameter to obtain which SSL client certificates used for mutual authentication between...

CVE-2018-5506

CVE-2018-5506 affects F5 BIG-IP: Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp allow unauthenticated brute-forcing of the em_server_ip authorization parameter to disclose which SSL client certificates are used for mutual authentication between BIG-IQ/EM and managed BIG-IP de...

CVE-2017-5506

Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-5506

CVE-2017-5506 is a double-free vulnerability in ImageMagick (magick/profile.c). A crafted image file could trigger a memory management flaw, allowing remote attackers to potentially exploit the process handling the image. The vulnerability is confirmed across multiple advisories and vendor postin...

CVE-2017-5506

Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file...

UBUNTU-CVE-2017-5506

Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-5506

Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file...

CVE-2016-5506

CVE-2016-5506 affects Oracle Fusion Middleware’s Oracle Identity Manager, specifically the App Server subcomponent. Multiple connected sources describe a local vulnerability that allows an attacker with local access to affect confidentiality and integrity, with CNVD indicating the attacker could ...

CVE-2015-5506

The vulnerability CVE-2015-5506 affects the Drupal Apache Solr Real-Time module (7.x-1.x) prior to 7.x-1.2. The root cause is that the module does not check the status of an entity when indexing, allowing remote attackers to retrieve information about unpublished content through search results. I...

Apache Solr Real-Time - Critical - Access Bypass - SA-CONTRIB-2015-119

This module allows content-changes to be committed to Apache Solr in real-time. The module doesn't check the status of an entity being indexed which means that unpublished content will get indexed by Solr and the title and partial content may be exposed to any user who has permission to search si...

CVE-2012-5506

The CVE-2012-5506 entry affects Plone: python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to cause a denial of service (infinite loop) by issuing an RSS feed request for a folder the user does not have permission to access. Connected advisories corroborate the s...

CVE-2014-5506

Double free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary code via crafted connection string record in an RPT file...

CVE-2014-5506

CVE-2014-5506 describes a double free vulnerability in SAP Crystal Reports, specifically in the handling of a connection string record within an RPT file. The flaw allows remote code execution and requires user interaction (the target must visit a malicious page or open a malicious file) to explo...

Cisco Firewall Services Module Software Multiple Vulnerabilities (cisco-sa-20131009-fwsm)

The remote Cisco Firewall Services Module FWSM device is affected by one or both of the following vulnerabilities. - A flaw exists in FWSM that could allow an authenticated, unprivileged, local attacker to execute certain commands in any other context of the affected system. CVE-2013-5506 - A fla...

CVE-2013-5506

The CVE-2013-5506 issue affects Cisco Firewall Services Module (FWSM) software in multiple-context mode. A flaw in the authorization code allows an authenticated, local attacker to read or modify any context’s configuration by executing certain commands. Affected releases include FWSM 3.1.x and 3...

Oracle Linux 3 / 4 : seamonkey (ELSA-2008-1037)

From Red Hat Security Advisory 2008:1037 : Updated SeaMonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security...

Ubuntu 6.06 LTS : mozilla-thunderbird vulnerabilities (USN-701-2)

Several flaws were discovered in the browser engine. If a user had JavaScript enabled, these problems could allow an attacker to crash Thunderbird and possibly execute arbitrary code with user privileges. CVE-2008-5500 Boris Zbarsky discovered that the same-origin check in Thunderbird could be...

Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-5506

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for gnome-web-photo FEDORA-2010-5506

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...